Read kernel messages using: cat /proc/kmsg

Firewall rule 'iptables -j LOG' while print messages about IP packets that
matches the rule. It will be used as last rule before a paket gets dropped
by the kernel.
Allow execution of iptables binary with any parameter